Principal Consultant

Infotrust; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid working

Professional development

Paid parental leave

Job summary

Infotrust’s Governance, Risk & Compliance practice is growing, and we’re looking for an experienced consultant to join our Sydney team. You’ll work closely with our Head of GRC, lead complex engagements and bring practical insight to clients’ security challenges.

Lead executive incident response tabletop exercises and advise senior stakeholders on cyber risk, governance and resilience while turning strategy into practical programs of work.

Qualifications

• Substantial cyber security experience and ability to connect technical detail with business context.
• Experience leading engagements and advisory work for senior stakeholders.
• Proven track record facilitating executive tabletop exercises for leadership teams.
• Experience developing GRC strategies and leading complex programs of work.

Responsibilities

• Scoping and leading complex cyber security and GRC engagements.
• Developing security strategies and roadmaps aligned with business priorities.
• Facilitating executive tabletop exercises to strengthen incident preparedness.
• Advising C-suite and senior stakeholders on cyber risk, governance and resilience.

Skills

Cyber security

Leadership & facilitation

GRC strategy

Incident response tabletop

Security frameworks ISO 27001

ISM & Essential Eight familiarity

CISSP/CISM preferred

Job description

Lead the conversations that shape how organisations manage cyber risk.

From helping executives navigate a simulated cyber incident to shaping an organisation’s security strategy, this role puts you at the centre of important client decisions.

Infotrust’s Governance, Risk & Compliance practice is growing, and we’re looking for an experienced consultant to join our Sydney team. You’ll work closely with our Head of GRC, lead complex engagements and bring practical insight to clients’ security challenges.

The Role

Executive incident response tabletop exercises will be a key part of your remit. You’ll design and facilitate sessions that test how leadership teams respond under pressure, challenge assumptions and help them make better decisions when an incident occurs.

Help clients understand their cyber risks, develop their GRC strategy and turn it into a practical program of work. You’ll have ownership of engagements, supported by experienced colleagues across Infotrust’s broader security practices.

Work will include:

• Scoping and leading complex cyber security and GRC engagements
• Developing security strategies and roadmaps aligned with business priorities
• Facilitating executive tabletop exercises that strengthen incident preparedness
• Advising C-suite and senior stakeholders on cyber risk, governance and resilience

Skills & Experience

Suited to an experienced security practitioner who can connect technical knowledge with business context. Comfortable leading a room, asking thoughtful questions and explaining complex issues clearly to senior audiences.

• Substantial cyber security experience, including senior consulting or advisory work
• A strong practitioner foundation and experience helping clients put security recommendations into practice
• A track record of facilitating incident response tabletop exercises for executive teams
• Experience developing GRC strategies and leading complex programs of work
• Strong knowledge of security frameworks such as ISO 27001, with familiarity across the ISM and Essential Eight
• An active interest in the Australian cyber security landscape and what emerging changes mean for clients

CISSP or CISM would be well regarded, along with IRAP assessment experience.

Why Infotrust

Infotrust brings together cyber security, technology and advisory services. Our GRC consultants work alongside offensive and defensive security specialists, an 24/7 SOC, and a dedicated Digital Forensics and Incident Response team.

That breadth gives you access to specialist expertise and practical perspectives to inform your advice. We also offer hybrid working, professional development and paid parental leave.